Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/839be5a5-dca4-34e0-b126-78e623b410e8.roa
File:                     839be5a5-dca4-34e0-b126-78e623b410e8.roa (raw, json)
Hash identifier:          rArB0xYdX5pY+ajc1ABbu8/PdIqCSUvRPdHPqyotMYY=
Subject key identifier:   53:92:A5:1F:C9:BB:19:7B:04:15:19:57:B1:91:78:2D:65:BB:8D:8F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F5F87AB68E7C7746D7A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/839be5a5-dca4-34e0-b126-78e623b410e8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.107.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:5f:87:ab:68:e7:c7:74:6d:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4810c5c2-526c-47a5-b8c6-c5faf6a05350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:6a:03:f3:56:15:09:dc:d2:8d:b0:83:ad:
                    61:f1:77:b7:d7:ff:18:4f:6e:59:6b:29:48:df:ea:
                    8a:50:7e:11:a1:c1:d1:31:3e:a9:dc:5c:cf:15:e8:
                    a8:34:55:c2:d5:32:84:dc:49:5e:a4:13:01:68:a2:
                    32:65:cd:cb:d0:b4:39:77:c1:a2:63:6a:cc:e0:77:
                    8e:88:92:6a:2d:25:fb:0e:8c:08:e3:97:95:ff:5e:
                    c6:37:68:08:af:f4:33:80:48:2b:dd:a2:bd:e3:60:
                    6e:6c:36:fb:2d:8e:8d:86:ff:b6:b7:d6:61:e5:19:
                    fc:b8:36:51:50:44:9f:d6:72:96:5b:6e:18:7f:e7:
                    a5:4f:b7:40:5e:5d:5f:a1:d2:07:bb:96:d9:67:db:
                    79:ee:c8:2e:6b:7b:33:ad:02:f3:1e:b1:3f:63:cc:
                    65:55:a7:72:e2:a8:ec:e3:8a:7c:03:88:ac:15:eb:
                    d2:d0:31:83:02:44:70:62:21:0d:c7:4d:20:01:92:
                    14:a7:2a:7f:80:c0:08:ab:5d:7f:25:fb:80:52:16:
                    f7:cb:b4:89:22:73:fe:5d:52:05:ef:16:60:83:df:
                    c9:8c:31:73:01:92:31:53:3f:2e:d4:3e:ed:74:c4:
                    51:2b:5e:e3:81:b8:34:af:d2:6c:60:d3:95:eb:15:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:92:A5:1F:C9:BB:19:7B:04:15:19:57:B1:91:78:2D:65:BB:8D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/839be5a5-dca4-34e0-b126-78e623b410e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:09:16:ad:9f:f7:c7:20:8b:f5:f8:35:99:8b:47:60:3c:ee:
         c0:3e:51:bc:37:a4:7f:e9:94:ed:28:db:52:5f:ab:12:0e:b8:
         aa:e1:b3:e4:bf:b2:c1:1d:29:27:10:db:b6:e7:e9:f7:e1:10:
         ff:27:91:8a:85:1b:6f:04:c6:56:42:34:29:0d:b8:c0:e8:f9:
         79:2f:af:d0:8d:74:81:d1:86:f2:53:48:56:5d:55:0c:fc:db:
         a8:03:c5:95:65:2f:a1:63:4d:84:8f:37:e2:a8:e4:6c:e4:d8:
         1a:8f:f8:a5:1f:05:f1:3f:7f:b2:ba:4f:82:fc:13:8c:ce:d0:
         bf:0b:63:df:9e:45:76:7c:53:72:72:84:b2:c0:c7:95:49:fe:
         56:94:17:30:78:68:a9:04:3b:47:03:89:b2:e6:fd:32:4d:83:
         d3:f6:57:43:63:e8:e9:36:26:04:a1:59:8b:ae:f3:22:f4:c6:
         f6:58:03:e6:4d:34:f7:40:01:91:46:fc:e9:2e:f6:c9:c3:62:
         66:1a:27:40:1f:9f:43:e0:4c:25:49:3f:b4:0d:ce:6c:67:0e:
         54:5f:f9:7f:8a:80:e2:ab:ba:eb:14:7b:66:b4:29:49:58:75:
         a1:aa:57:31:8f:96:ef:db:d5:c2:60:bb:76:83:be:02:38:7c:
         5b:ad:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:22 2026 by rpki-client